Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer (raw, json)
Hash identifier: q6KEJ34ZJ4kzgsVUPuFx1sUNZ3Xoi/bOwaamVKGP48k=
Subject key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 4AD2
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Tue 16 May 2023 14:38:08 +0000
Certificate not after: Sat 31 Aug 2024 00:00:00 +0000
Subordinate resources: IP: 148.109.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 02:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19154 (0x4ad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: May 16 14:38:08 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:a4:b8:e6:95:cd:fc:12:4a:e9:c0:6f:cc:
21:24:4d:00:59:cd:c4:ea:76:e0:61:e0:c7:43:28:
c8:f3:75:9d:63:36:1e:e9:2d:02:8b:60:e1:89:70:
8c:0e:61:38:a6:2a:1c:d6:e4:5e:ab:c2:43:58:b2:
ae:72:77:5b:66:cf:e6:55:9c:ca:d7:69:ba:bc:2c:
36:d4:c6:0a:88:0a:fb:0e:86:28:fa:63:a3:c4:77:
ec:56:13:43:8b:8f:54:aa:44:0f:7b:a0:7e:d4:41:
a7:93:72:1d:68:22:02:65:44:79:f0:e8:32:92:12:
a0:f2:ac:7f:d5:b9:1c:fd:26:11:a4:bd:25:b2:1d:
de:e2:60:46:ce:e0:20:e3:80:cb:d5:76:8a:5e:e2:
6c:45:38:d9:c0:8c:46:cf:be:e3:b8:77:be:95:df:
ac:30:e9:13:51:54:31:4e:26:0c:0e:b4:e2:2c:57:
12:96:5d:0f:de:2c:cb:ce:67:c4:66:99:35:e0:51:
3c:a0:93:01:c4:d8:fe:d1:4f:fe:93:05:06:13:9f:
b7:38:37:11:a6:44:b1:d8:d3:dd:74:18:1a:59:1a:
2e:a3:d2:7e:45:4c:e7:83:8c:4d:75:35:db:cc:5e:
88:32:ca:e4:39:d1:51:82:22:dc:02:47:93:71:6c:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:4f:12:4b:99:6a:31:9d:64:f5:87:a8:68:81:57:ed:c8:fd:
74:25:99:af:c9:97:bd:3c:bf:d4:dd:fe:68:8e:1a:33:a3:7f:
bf:2a:e9:45:fe:f3:6f:a1:c5:ce:8f:b3:9c:2f:02:71:93:b2:
85:80:41:1b:cc:7b:86:cc:1d:33:3e:d3:64:43:e6:86:34:ec:
ba:8d:b1:9b:cd:c2:76:d3:9e:10:ba:5e:11:f9:91:1b:90:c4:
d5:69:e6:a6:64:26:52:77:ac:17:52:f7:11:9c:d8:cd:c0:b9:
d8:54:0e:c8:cc:c0:09:3c:3c:b8:7e:06:4b:23:2a:05:68:03:
e0:3d:6a:49:64:86:21:53:a1:15:a9:ec:36:e0:42:a3:b3:a5:
58:e4:b0:2a:c3:64:db:b3:2f:60:cd:33:a0:f2:ff:32:5c:c7:
fd:b8:0b:56:ca:a6:39:c2:85:8c:da:15:8a:bf:6a:ba:70:c5:
2b:c6:56:a1:64:07:7a:af:ed:f5:dd:40:96:04:e2:e8:71:ea:
9f:5a:b2:ee:1d:fb:7f:04:ba:b9:bb:d7:fd:c0:1d:43:a4:a8:
c2:fb:b5:be:5e:87:6b:d1:60:e2:f4:e9:b4:82:52:5a:e2:0d:
55:d7:52:fa:35:7b:c7:27:1e:7f:c6:ed:82:27:4c:d3:6a:0d:
09:e0:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:49:42 2024 by rpki-client on console-fra.rpki-client.org